Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB28AB0DBF311EFA8946D62762E951A.roa
File: 0BB28AB0DBF311EFA8946D62762E951A.roa (raw, json)
Hash identifier: 85BdC/UBPmNJnzF+oORVncbsf6A/lVMp0+ldtMkLC/Q=
Subject key identifier: CF:D0:87:73:F2:45:4C:60:CC:5D:EC:F1:3D:F9:17:7A:B8:F2:3D:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB28AB0DBF311EFA8946D62762E951A.roa
Signing time: Sun 26 Jan 2025 14:37:19 +0000
ROA not before: Sun 26 Jan 2025 14:37:12 +0000
ROA not after: Fri 21 Mar 2025 14:37:12 +0000
asID: 138915
IP address blocks: 154.93.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84688 (0x14ad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:37:12 2025 GMT
Not After : Mar 21 14:37:12 2025 GMT
Subject: CN=6796489f-7d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:89:03:20:27:db:57:13:d3:89:c6:80:95:
ba:9d:fc:99:7b:f0:33:ae:84:47:3b:05:c8:3a:22:
80:8e:6f:85:03:11:f8:70:9a:00:ae:04:ff:55:2b:
bb:90:6b:b2:b4:19:79:29:06:82:00:94:4c:51:31:
88:25:67:87:f1:55:40:ad:4c:84:f7:36:cf:16:a0:
a5:d2:85:19:a0:c9:b6:2b:ab:aa:e6:ad:0b:e7:e2:
43:ac:b0:76:ae:20:fb:a9:83:81:f3:17:cc:4d:1f:
72:84:c1:25:c6:86:25:a3:dd:70:7c:f0:fb:a7:82:
b0:f9:52:8a:35:d4:ba:d1:4e:4c:cf:1d:2c:1b:fd:
6c:95:47:b5:98:1e:5c:64:2d:d9:f2:a6:d3:47:94:
38:c3:7d:f4:b0:e7:40:4c:6a:cb:28:05:81:2b:ea:
ff:1f:d8:43:c3:20:20:c5:68:04:c1:03:cb:0f:8f:
91:8c:ad:e1:99:d9:19:ba:e1:d3:4f:a9:7c:14:d5:
4d:31:a9:50:1e:9b:b6:a5:5a:0a:fb:7c:c6:65:89:
4e:ba:ca:e3:8c:c7:f7:a1:ff:48:2a:5b:9d:58:8a:
53:44:b5:af:c2:5e:b9:5a:fc:ab:35:4d:81:5b:f0:
8f:30:ee:f4:77:92:97:50:70:e9:d2:4a:51:d0:2f:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:87:73:F2:45:4C:60:CC:5D:EC:F1:3D:F9:17:7A:B8:F2:3D:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB28AB0DBF311EFA8946D62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.56.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:5e:48:56:82:cc:48:d4:4c:09:6d:42:d7:84:e0:6f:e1:d4:
df:3b:28:d4:55:8c:b2:ce:4c:d6:2f:7d:f9:95:32:34:c6:15:
d6:2d:9a:d4:69:bd:5b:f5:3e:7c:ed:f8:b1:37:f9:36:54:87:
7f:4c:a3:36:75:d3:df:24:fa:74:f5:1a:54:85:62:06:ed:23:
06:b6:c7:b7:b6:b0:78:b2:e8:36:24:1f:7f:fb:34:ef:3d:07:
59:80:60:fd:21:cf:25:16:db:7b:c4:d4:c7:cb:44:74:85:7f:
91:4e:7b:be:65:75:94:7a:37:8e:42:14:cd:d2:bb:97:d8:fd:
80:e6:02:cf:61:05:e2:9d:e3:bb:76:64:83:7b:fe:b3:de:37:
f4:7a:3c:a3:08:b5:22:28:91:9e:fe:33:74:a3:17:d3:cf:5c:
89:40:b6:36:d1:f5:2a:fe:dc:78:0d:41:54:ac:c3:18:ec:62:
66:e4:f9:1d:7e:6a:9e:85:f9:6c:43:6a:ab:b3:1d:18:cc:2f:
bf:3a:7e:bd:12:11:5d:f1:0f:c1:00:f6:38:92:67:36:93:d9:
48:fb:51:c3:a2:06:b9:d9:f1:f3:48:3b:15:c3:d2:84:bb:fd:
90:4e:3e:c5:7d:c7:3a:5c:5c:d9:3b:3d:e7:ea:b1:f5:7d:8d:
4d:64:e2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:56:41 2025 by rpki-client